Updates to some dictionary files - infinera, transmode, coriant
We recently updated freeradius, and noticed that it came with a "dictionary.infinera". Generally we're looking to see if this project is interested in some updates to this file. What's listed in the file that comes with FreeRADIUS is actually "transmode" (an infinera acquisition). We have 3 definition files we use for Inffinera, one is "actual infinera", one is "coriant" and one is "transmode". Posting here with hopes they get integrated into FreeRADIUS, as many of htem were barely documented things deep inside these vendor's docs. If it's kosher to put vendor acquisitions inside their current vendor's file, then adding them to "dictionary.infinera" is good. If not, I'd split off what is currently in the infinera dictionary to be transmode. file details below: # dictionary.coriant: VENDOR Coriant 42229 BEGIN-VENDOR Coriant #g30 chassis ATTRIBUTE Coriant-Priv-Lvl 1 integer ATTRIBUTE Coriant-User-Class 2 string ATTRIBUTE Coriant-Timeout 3 integer ATTRIBUTE Coriant-Max-Sessions 5 integer #tnms ATTRIBUTE Coriant-TNMS-UserGroup 6 string END-VENDOR Coriant # dictionary.transmode VENDOR Transmode 8708 BEGIN-VENDOR Transmode ATTRIBUTE Infinera-User-Category 1 string ATTRIBUTE Infinera-ENM-User-Category 2 string END-VENDOR Transmode # dictionary.infinera VENDOR Infinera 21296 BEGIN-VENDOR Infinera # For privilege attributes 1 - 16 ATTRIBUTE Infinera-User-Priv-SA 1 integer ATTRIBUTE Infinera-User-Priv-NA 2 integer ATTRIBUTE Infinera-User-Priv-NE 3 integer ATTRIBUTE Infinera-User-Priv-PR 4 integer ATTRIBUTE Infinera-User-Priv-TT 5 integer ATTRIBUTE Infinera-User-Priv-MA 6 integer ATTRIBUTE Infinera-User-Priv-RA 7 integer ATTRIBUTE Infinera-User-AdminDomain 100 string ATTRIBUTE Infinera-User-Max-Concurrent-Session 101 integer ATTRIBUTE Infinera-User-Allowed-Timezone-Config 102 integer ATTRIBUTE Infinera-User-TimeZone 103 string ATTRIBUTE Infinera-User-Email-ID 110 string ATTRIBUTE Infinera-User-Email-Notification 111 integer ATTRIBUTE Infinera-User-Email-Alarm-Type 112 integer ATTRIBUTE Infinera-User-Email-Filter-Name 113 string ATTRIBUTE Infinera-User-Email-AdminDomain 114 string # For Misc Session Attributes 17 - 32 ATTRIBUTE Infinera-User-SessionTimeout 17 integer ATTRIBUTE Infinera-User-LockedOut 19 integer ATTRIBUTE Infinera-User-CanUseResSession 20 integer #For Mgmt Type based privileges 33 - 40 ATTRIBUTE Infinera-User-MgmtType-EMS 33 integer ATTRIBUTE Infinera-User-MgmtType-GNM 34 integer ATTRIBUTE Infinera-User-MgmtType-TL1 35 integer ATTRIBUTE Infinera-User-MgmtType-CLI 36 integer ATTRIBUTE Infinera-User-MgmtType-NETCONF 37 integer #reserved attributes 240 - 255 #240 - 248 for reserved strings ATTRIBUTE Infinera-Rsvd-Str-Attribute1 240 string ATTRIBUTE Infinera-Rsvd-Str-Attribute2 241 string #249 - 255 for reserved strings ATTRIBUTE Infinera-Rsvd-Int-Attribute1 249 integer ATTRIBUTE Infinera-Rsvd-Int-Attribute2 250 integer #Values for corresponding attributes. #SA,NA,NE,PR,TT Values VALUE Infinera-User-Priv-SA SA-NONPRIVILEGED 0 VALUE Infinera-User-Priv-SA SA-PRIVILEGED 1 VALUE Infinera-User-Priv-NA NA-NONPRIVILEGED 0 VALUE Infinera-User-Priv-NA NA-PRIVILEGED 1 VALUE Infinera-User-Priv-NE NE-NONPRIVILEGED 0 VALUE Infinera-User-Priv-NE NE-PRIVILEGED 1 VALUE Infinera-User-Priv-PR PR-NONPRIVILEGED 0 VALUE Infinera-User-Priv-PR PR-PRIVILEGED 1 VALUE Infinera-User-Priv-TT TT-NONPRIVILEGED 0 VALUE Infinera-User-Priv-TT TT-PRIVILEGED 1 VALUE Infinera-User-Priv-MA MA-NONPRIVILEGED 0 VALUE Infinera-User-Priv-MA MA-PRIVILEGED 1 VALUE Infinera-User-Priv-RA RA-NONPRIVILEGED 0 VALUE Infinera-User-Priv-RA RA-PRIVILEGED 1 VALUE Infinera-User-Allowed-Timezone-Config TIMEZONE-CONFIG-ALLOW 1 VALUE Infinera-User-Allowed-Timezone-Config TIMEZONE-CONFIG-NOT-ALLOW 0 VALUE Infinera-User-Email-Notification EMAIL-NOTIFICATION-ENABLE 1 VALUE Infinera-User-Email-Notification EMAIL-NOTIFICATION-DISABLE 0 VALUE Infinera-User-Email-Alarm-Type EMAIL-ALARM-TYPE-ALL 0 VALUE Infinera-User-Email-Alarm-Type EMAIL-ALARM-TYPE-NEW 1 VALUE Infinera-User-Email-Alarm-Type EMAIL-ALARM-TYPE-CLEAR 2 #Misc Attributes's values setting VALUE Infinera-User-CanUseResSession CANNOT-USE-RES-SESSION 0 VALUE Infinera-User-CanUseResSession CAN-USE-RES-SESSION 1 #Mgmt Type Values VALUE Infinera-User-MgmtType-EMS MGMTTYPE-EMS-DISALLOWED 0 VALUE Infinera-User-MgmtType-EMS MGMTTYPE-EMS-ALLOWED 1 VALUE Infinera-User-MgmtType-TL1 MGMTTYPE-TL1-DISALLOWED 0 VALUE Infinera-User-MgmtType-TL1 MGMTTYPE-TL1-ALLOWED 1 VALUE Infinera-User-MgmtType-GNM MGMTTYPE-GNM-DISALLOWED 0 VALUE Infinera-User-MgmtType-GNM MGMTTYPE-GNM-ALLOWED 1 VALUE Infinera-User-MgmtType-GNM MGMTTYPE-CLI-DISALLOWED 0 VALUE Infinera-User-MgmtType-GNM MGMTTYPE-CLI-ALLOWED 1 VALUE Infinera-User-MgmtType-GNM MGMTTYPE-NETCONF-DISALLOWED 0 VALUE Infinera-User-MgmtType-GNM MGMTTYPE-NETCONF-ALLOWED 1 VALUE Infinera-Rsvd-Int-Attribute1 INFINERA 1 END-VENDOR Infinera
On Apr 30, 2024, at 4:13 PM, Chris Wopat <me@falz.net> wrote:
We recently updated freeradius, and noticed that it came with a "dictionary.infinera".
Generally we're looking to see if this project is interested in some updates to this file.
We're always interested in dictionary updates. It would be nice if vendors send those to us, but I think that's only happened 2-3 times. :(
We have 3 definition files we use for Inffinera, one is "actual infinera", one is "coriant" and one is "transmode".
Posting here with hopes they get integrated into FreeRADIUS, as many of htem were barely documented things deep inside these vendor's docs.
Sure.
If it's kosher to put vendor acquisitions inside their current vendor's file, then adding them to "dictionary.infinera" is good. If not, I'd split off what is currently in the infinera dictionary to be transmode.
Splitting them off is the pattern we use.
file details below:
I'll take a look. But a GitHub PR would be nice, too. Alan DeKok.
participants (2)
-
Alan DeKok -
Chris Wopat